SecuriteInfo[.]com[.]HEUR[.]30129[.]26832[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.HEUR.30129.26832.exe
Size

201KB
MD5

477eb13c7553467d21b7a504efd50c08
SHA1

8c251509e717bdfb88670b93e8ba89d6b5c64afd
SHA256

290a168b13753896da9f5aae39b224e4cc99d647e1f32465ff496659add55b8d
SHA512

88740068bd2e0eef1e21d075d8e17ff59890a5d1b78de86eb0a26d1cc1fd103dc5e019190dbaef2f241113711662d5fbe110dc4aa77e75573df4206ec9543558
SSDEEP

3072:HZUlUJ7TQqb/JiK2rYdaNEma2JbiDt4IYYudw89iONWj3:TRT1rsKOYda1JbiDtib9iONa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.HEUR.30129.26832.exe

Files

SecuriteInfo.com.HEUR.30129.26832.exe
.exe windows:5 windows x64 arch:x64

ac841093869946745d711279d578cd22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCurrentProcess
CreateRemoteThread
GetExitCodeThread
GetLastError
WriteProcessMemory
WaitForSingleObject
GetStdHandle
CloseHandle
OpenProcess
GetEnvironmentVariableA
GetFileAttributesA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
CreateToolhelp32Snapshot
Module32First
Module32Next
VirtualFreeEx
VirtualAllocEx
GetModuleHandleA
GetProcAddress
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
GetConsoleMode
ReadConsoleInputA
SetConsoleMode
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
WriteFile
GetModuleFileNameW
HeapFree
Sleep
LoadLibraryExW
RtlUnwindEx
CreateFileW
HeapAlloc
GetProcessHeap
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeW
LCMapStringW
OutputDebugStringW
LoadLibraryW
HeapSize
HeapReAlloc
GetConsoleCP
SetFilePointerEx
WriteConsoleW
FlushFileBuffers
SetStdHandle

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac841093869946745d711279d578cd22

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 41KB - Virtual size: 40KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 5KB - Virtual size: 17KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 123KB - Virtual size: 122KB

.text
Size: 41KB - Virtual size: 40KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 5KB - Virtual size: 17KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 123KB - Virtual size: 122KB